Privacy Policy

Who we are and who this applies to

Maverick Workforce is operated by Maverick Providence Limited. It is a workforce operations platform used by authorised organisations and their employees, workers and operatives, contractors, managers, administrators, client or site contacts where applicable, and other authorised users.

An employer or other customer organisation will often decide why workforce information is used. In those circumstances, it is normally the data controller and Maverick Providence Limited processes information to provide the platform. We may also act as controller for account security and operation of the service.

Information we may process

Depending on which features an organisation uses, information may include:

• name, email address, phone number, account, profile and role information;
• employment or workforce details, site and shift assignments, attendance, clock-in/out and relevant location or geofence information;
• tasks, checklists, photographs or other operational evidence, training, inspections and audit records;
• concerns, incidents, leave, absences, swaps, documents and operational communications;
• compliance information, including right-to-work or DBS-related records where an organisation uses those features;
• timesheet, pay-rate, payroll and banking information where authorised users choose to store or process it in the platform;
• messages, notification records and delivery information;
• WhatsApp Business identifiers and message or delivery information that Meta sends to the integration, where WhatsApp is connected; and
• technical information produced while operating the service, such as authentication, API and application logs and related request or device information where available.

Why information is used

Information may be used to manage workforce operations, schedule shifts, track attendance, coordinate tasks and cover, manage training and compliance, conduct inspections, handle concerns or incidents, provide operational communications, support authorised managers and administrators, maintain records, secure and operate the platform, and meet contractual, legal or regulatory obligations.

Legal bases

Depending on the circumstances, processing may be necessary to perform a contract, comply with a legal obligation, or pursue legitimate interests such as operating a safe and effective workforce service. Consent is used where it is specifically required or appropriate. Where consent is the basis, it may be withdrawn without affecting earlier lawful processing.

Location information and geofenced attendance

Where an organisation uses geofenced clock-in/out, your device location may be accessed at the moment you clock in, to check whether you appear to be at your assigned work site. Location is not accessed continuously and is not used to track movement during a shift or afterwards. See our dedicated Location & Attendance notice for the full explanation of what is collected, why, when, and who can see it.

The result of that check (within or outside the configured geofence, and the distance if outside) is visible to managers already authorised to view attendance for that site. The underlying exact coordinates are treated as more sensitive and are restricted further, to a narrower set of senior roles who hold a specific additional permission for it. This location information is used only to support attendance verification, keep accurate working-time records, and resolve genuine clock-in/out disputes — never for productivity scoring, movement profiling, or general surveillance.

WhatsApp and Meta

An authorised organisation may connect WhatsApp Business for operational communications such as shift reminders, cover requests, attendance prompts, training notices and task or concern updates. WhatsApp is a communication channel; Maverick Workforce remains the system of record for workforce activity.

The integration processes only information made available through the authorised WhatsApp Business connection and the features in use. Meta and WhatsApp also process information independently under their own terms and privacy information.

Service providers and international processing

Authorised providers help operate the service. These currently include Supabase for backend, database, authentication and storage infrastructure; Fly.io for application hosting; and Meta/WhatsApp where the messaging integration is used. Some providers may process information outside the UK. The production Supabase project is hosted in West EU (Paris), France.

Access, retention and security

Access within Maverick Workforce is permission-based and intended to limit users to information needed for their authorised role and functions. We use reasonable technical and organisational measures, including account, role and permission controls and managed infrastructure. No online service can guarantee absolute security.

Information is retained only for as long as reasonably necessary for operational, contractual, employment, legal, accounting, compliance or dispute-related purposes. The appropriate period depends on the information and why it is held.

Your rights

Subject to applicable law, UK data-protection rights may include access, correction, erasure, restriction, objection and data portability where applicable, as well as withdrawal of consent where consent is the basis. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

For employment or workforce records, contact your employer or organisation first where it controls that information. You may also follow our data deletion instructions.

Contact

Contact Maverick Providence Limited at maverickprovidence@gmail.com with privacy questions or requests. Please provide enough information for us to understand the request and identify the relevant account or organisation.